MAL-2025-163271 Malicious code in nokire-nanali2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28adb2045ab3c09e58ed598d5958b27086144b09604caef6b65db307b5e3c7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150522 Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165256 Malicious code in ruji-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2017bd3ab11a7dcac6bfd2cd9540ff38ac7f8401446ba60f6a7f3bd28a1c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfc602aadc0b148d57ffccf505f803c37c5fe9f2bc738877b908951a36b1b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a37e717bdc29dd739d63db1d208a016065b5cd726929548d74514e3babcb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beea29a05c6bfb0342d94ec10bda3563e29d9fa19c7e7b34e5ad36dc058341b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21275df9f55575cb5e9c72882e1bb2b0f7df5bfbab741af0ad092e26d586778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6d4b4e2318eb60c954f00d6a9371c73e0a6d667bf1c35d804d08b2ae5f6711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5256a8dadcb143380182f9eefa58a4d35682a3fec388152116dd52d350d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyasada-dafdadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32dcd12b5f69b7d592cf97a552f386a0850107f02fa6d5ef44aea6a7a5dc6702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b37634e45ff2d75e7ab2cb02585cb6ba524e07f15ca75cbacea94760de48e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243fc1833be239c088f4a83f2d6cb3aa0d08e85adfdc49e4b9906096cb7dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51f69fc3a44c6885141b4a76c92f6cdddf7b0631ffeb012848d9adfca1b4486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1130f9c2fd27622c5b319a15e750a3c9eee94b89701805dc28f18b07d702f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b2a8fb68d6833e34aed66a484c90d1c70dbc3a5d157bb1d4bdbc88761b093c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f706360039bec7d16f0d06cc9818f2269170aaebcbc4fef79cb9662d1bbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-nutayadada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ae5a4170d7b1ad56e5955608d29c43cfa983f62818cbbbf4fbd6254f7f3f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ersius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d350cd1c2ee9a681699b10cc081b237f70b2d131f1370281fd586cde108ff557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...